[Tello]

What can ya do with the XSS Scripting?

Like hacking people or w.e?

[Anarkhos]

What can ya do with the XSS Scripting?

Like hacking people or w.e?

It depends if it's persistent or non-persistent.
You cant do much with non-persistent apart from local stuff ( still considered a vuln though)
If its persistent well you can redirect page to your deface, steal session cookies.
Hum the vuln OP found is most likely non-persistent though, but hey maybe he struck DIAMOND and is getting ALLOT of $.

[SatanTheGod]

I found a non persistant XSS recently, reported it and i got 500. But i still haven't gotten any money into my account yet.

[Sonic Boom]

Fucking noob you are a skid.
Spoiler (Click to View)lol, I am joking of course, congratulations on this my friend, I also expect that big day where I might find an XSS on Google. Again, congratulations mate.

[Andreavedy]

I found a SQL Injection on account.google.com with Google dorks and hacked database (3 billion users) with Havij.
Ok no, congratulations :)

[vehla]

I found a SQL Injection on account.google.com with Google dorks and hacked database (3 billion users) with Havij.
Ok no, congratulations :)

I am sure you don't even got money to afford 1MB/S internet 😈

[Jαmes]

Best google dork:
Spoiler (Click to View)site:google.com/m/gn/ inurl:output=json

No lies. Anyway, grats on the $500 if they accept it :).

[Light Yagami.]

con gratz mate i weish i could find xss in google i am not that good at xss

[HackRain]

Got a reply from google.
Not happy,

Hi Will,

We appreciate the detailed report. Unfortunately this issue was previously
submitted to us by another user and we are just putting the finishing
touches on our fix. Unfortunately as this is a duplicate of a previously
known issue it does not qualify for the VRP.

Regards,
Kevin

EDIT!
I herd back from them again recently, they stated i am now in fact illegible ^.^
They made a mistake.

[MyLittlePony]

Got a reply from google.
Not happy,

Ouch.
Them bitches probably lying though and just telling you that somepony else already reported it to them.

[Dr Plague]

If I was you I'd rage.

I was reading this thread then you get bad reply. -.-

[vehla]

Same Happened with Me.

Thanks for your email.

I’ve filed a bug and will get back to you once I’ve got more information. At first glance, this might not be severe enough to qualify for a reward, though the panel will take a look and let you know once they’ve made their decision.

Regards,
Gynvael, Google Security Team

I was so happy... But then-

Hi,

I've just noticed that we've already received prior notice about this issue, so unfortunately, your report is a duplicate of an existing issue. Since we already have a bug report on file, it isn't eligible for a reward.

Kind regards,
Gynvael, Google Security Team

I mean wtf? If you have received it before also then why didn't you fixed it yet? 😑

[SuaveSalmon]

Lol google pays in $1,337 bucks. Fucking baws!

[king225]

nice work buddy ..hope google will reward u

[lakalaka]

will never reward you.. and the reason? always will tell you someone other find it first..